$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft File: nryww05Pd_InjbFcWeHtrH5VdW4.mft (raw, json) Hash identifier: H3ntwd0yxHTamnj1hKv+vbqM/TTp9OEwc9qWJ8Z+EMU= Subject key identifier: 89:31:48:FC:26:AF:C6:0E:2F:78:F4:3A:A0:E4:C9:7B:59:3C:B9:70 Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E Certificate issuer: /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft Manifest number: 0107 Signing time: Sat 19 Jul 2025 05:17:22 +0000 Manifest this update: Sat 19 Jul 2025 05:17:22 +0000 Manifest next update: Sat 26 Jul 2025 05:17:22 +0000 Files and hashes: 1: nryww05Pd_InjbFcWeHtrH5VdW4.crl (hash: oJdu3nxiKtSUhVLehukHIHvamJeXp3zM8uvqh+r0zbk=) 2: B999A66AD54E11EE842E2F58C4F9AE02.roa (hash: vw+/iUHoOFUwAmpBNT98n/MAMjwloVjL5FS/iwIttZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E Validity Not Before: Jul 19 05:17:22 2025 GMT Not After : Jul 26 05:17:22 2025 GMT Subject: CN=687b2a62-5360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:2c:e2:5f:53:dc:97:5e:b8:5a:9c:71:ef: 57:69:72:69:ba:7e:81:d0:51:a1:40:60:27:48:21: 1a:89:d2:73:f5:e7:f3:8e:34:40:ab:7b:03:59:9a: 9e:61:b4:82:df:a7:25:a2:cb:45:a4:f8:3f:26:9e: 82:95:fd:10:09:bf:6e:b6:29:7e:14:45:81:5c:a3: 7c:74:cb:09:c1:dd:24:c9:48:d4:9e:24:6b:d7:95: 6a:ff:94:86:d1:05:73:98:65:c7:4b:53:64:9b:1a: a4:02:bc:d8:a9:93:9f:7e:9d:3e:79:4d:4b:8d:fc: 12:3c:d2:69:90:15:d3:9f:94:0b:4e:bf:fd:30:da: c0:a4:4c:45:84:50:18:0f:d6:42:ea:45:4a:62:d2: 83:30:5a:8f:95:09:18:d8:68:1f:1f:8c:de:64:ad: 2c:24:fd:6d:6f:87:c3:42:a6:85:40:f5:0a:0e:8e: ca:8c:b8:d1:d1:12:91:4e:1d:17:d6:20:cc:a6:05: af:4d:22:01:5d:a4:4d:29:8e:18:a5:2e:dd:4e:52: 64:0b:41:1b:c3:fb:46:82:fd:00:b2:d8:ef:f3:d2: 51:ad:ca:80:97:35:ae:59:5b:2a:3e:eb:bd:e4:4e: 69:35:a6:ce:dc:81:6b:8e:48:7f:c1:5e:51:58:31: 83:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:31:48:FC:26:AF:C6:0E:2F:78:F4:3A:A0:E4:C9:7B:59:3C:B9:70 X509v3 Authority Key Identifier: keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d1:14:5e:8d:3b:6d:78:58:0f:b6:b8:68:60:60:d5:ef:9a: a9:e2:4e:34:14:9a:b8:b6:d5:53:e4:39:f9:9a:22:3d:ff:46: 3f:c0:a8:27:1e:80:f6:57:8b:be:44:28:a0:fe:0a:09:69:bc: a8:80:37:f4:a9:79:12:5a:1e:2a:39:36:01:51:db:56:a6:2d: e3:17:98:8d:38:f0:97:45:6a:92:aa:12:d1:22:d1:0b:d9:23: 24:3a:e5:c1:53:16:37:92:aa:93:bd:2b:26:80:b9:68:04:a0: a4:d0:43:56:ce:d1:15:18:bf:30:19:8a:d2:78:bb:01:b1:68: f5:43:ee:23:ba:ec:ff:d7:29:f7:85:53:86:d9:40:76:22:60: fb:88:8b:0c:35:ed:54:94:a1:6a:da:c9:28:3e:8c:22:2f:aa: 8a:8d:54:7c:f9:87:3b:7e:3e:44:c7:9e:da:4f:fa:6e:9f:c0: d3:7b:bb:dc:ea:46:54:e5:e4:fa:ec:a3:7c:42:d2:d8:14:4c: f0:48:1a:d9:66:86:aa:af:50:3c:d9:2b:1e:d5:78:c9:e1:c4: fe:a0:0f:fd:c7:ae:f7:7d:4b:c0:d7:ce:f0:c0:c0:c2:a6:d1: fc:4e:01:b0:1f:4e:fc:a9:5c:ab:71:54:5b:d5:c2:38:93:cb: 31:bf:a4:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MjExMTAvBgNVBAUTKDlFQkNCMEMzNEU0Rjc3RjIyNzhEQjE1QzU5RTFFREFD N0U1NTc1NkUwHhcNMjUwNzE5MDUxNzIyWhcNMjUwNzI2MDUxNzIyWjAYMRYwFAYD VQQDEw02ODdiMmE2Mi01MzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaAs4l9T3JdeuFqcce9XaXJpun6B0FGhQGAnSCEaidJz9efzjjRAq3sDWZqe YbSC36clostFpPg/Jp6Clf0QCb9util+FEWBXKN8dMsJwd0kyUjUniRr15Vq/5SG 0QVzmGXHS1NkmxqkArzYqZOffp0+eU1LjfwSPNJpkBXTn5QLTr/9MNrApExFhFAY D9ZC6kVKYtKDMFqPlQkY2GgfH4zeZK0sJP1tb4fDQqaFQPUKDo7KjLjR0RKRTh0X 1iDMpgWvTSIBXaRNKY4YpS7dTlJkC0Ebw/tGgv0Astjv89JRrcqAlzWuWVsqPuu9 5E5pNabO3IFrjkh/wV5RWDGDgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkxSPwm r8YOL3j0OqDkyXtZPLlwMB8GA1UdIwQYMBaAFJ68sMNOT3fyJ42xXFnh7ax+VXVu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgyMS9BQjIyRUFDNEQ1 NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1UGRfSW5qYkZjV2VIdHJINVZk VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25yeXd3MDVQZF9JbmpiRmNXZUh0ckg1VmRXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgyMS9BQjIyRUFDNEQ1NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1UGRf SW5qYkZjV2VIdHJINVZkVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg0RRejTtteFgPtrhoYGDV75qp4k40FJq4ttVT5Dn5miI9/0Y/wKgn HoD2V4u+RCig/goJabyogDf0qXkSWh4qOTYBUdtWpi3jF5iNOPCXRWqSqhLRItEL 2SMkOuXBUxY3kqqTvSsmgLloBKCk0ENWztEVGL8wGYrSeLsBsWj1Q+4juuz/1yn3 hVOG2UB2ImD7iIsMNe1UlKFq2skoPowiL6qKjVR8+Yc7fj5Ex57aT/pun8DTe7vc 6kZU5eT67KN8QtLYFEzwSBrZZoaqr1A82Sse1XjJ4cT+oA/9x673fUvA187wwMDC ptH8TgGwH078qVyrcVRb1cI4k8sxv6Q8 -----END CERTIFICATE-----Generated at Sun Jul 20 11:23:58 2025 by rpki-client